Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/EG7z5KgLUxeQiR11Co2P7P9Yd5Y.roa
File: EG7z5KgLUxeQiR11Co2P7P9Yd5Y.roa (raw, json)
Hash identifier: mIXYmZQrI8WSWouiIDOKiBqxggDHxIBy9ePpvd6Ders=
Subject key identifier: 10:6E:F3:E4:A8:0B:53:17:90:89:1D:75:0A:8D:8F:EC:FF:58:77:96
Certificate issuer: /CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Certificate serial: 01862CB02FF3DA1E40761764C682C848D056
Authority key identifier: 1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/EG7z5KgLUxeQiR11Co2P7P9Yd5Y.roa
Signing time: Tue 07 Feb 2023 16:23:09 +0000
ROA not before: Tue 07 Feb 2023 16:23:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43624
IP address blocks: 91.211.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2c:b0:2f:f3:da:1e:40:76:17:64:c6:82:c8:48:d0:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b
Validity
Not Before: Feb 7 16:23:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=106ef3e4a80b531790891d750a8d8fecff587796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:de:10:5c:af:af:7f:f6:cc:46:45:d6:b1:42:
d7:e9:ee:0b:b1:c7:31:c9:6e:aa:2f:da:0f:cc:a9:
72:46:a2:eb:a7:06:17:74:3f:e5:38:92:d9:cb:fe:
b1:a7:f3:7d:46:c3:d9:76:2f:f5:cb:d0:8e:27:76:
69:f3:49:ad:b0:16:0b:52:66:2c:bd:83:0b:97:ae:
7a:ff:1c:85:8d:fa:21:ab:da:fe:c3:7b:b6:44:8a:
e5:c8:db:83:ae:47:30:55:ab:9a:af:6b:a9:22:51:
b9:04:c1:7b:4c:61:e0:05:80:a8:4e:4d:0b:8b:c3:
c8:59:93:53:14:b1:42:c3:88:84:91:4b:13:71:34:
15:0e:c4:68:25:0c:1d:4d:34:c1:4f:28:8c:c8:f8:
55:2b:90:e2:ff:9e:1e:bc:14:ac:2a:80:9d:e1:45:
62:46:85:8c:3c:14:5a:79:57:a4:a4:39:f1:ae:25:
d5:8a:c2:43:9c:2a:d1:8e:a1:2b:d0:10:91:74:42:
bc:04:64:40:f5:44:cc:08:6d:84:e7:9f:c2:07:4a:
91:2a:02:8d:67:14:e2:12:5c:cf:89:6d:b4:0a:be:
9a:7a:09:d7:77:d2:34:65:38:00:96:7d:a9:0a:15:
d6:a7:cc:89:97:37:3d:ab:73:6a:12:69:06:4f:af:
23:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6E:F3:E4:A8:0B:53:17:90:89:1D:75:0A:8D:8F:EC:FF:58:77:96
X509v3 Authority Key Identifier:
keyid:1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/EG7z5KgLUxeQiR11Co2P7P9Yd5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.115.0/24
Signature Algorithm: sha256WithRSAEncryption
03:10:ef:08:1f:81:8e:65:82:4b:e9:3c:0b:35:47:0c:e2:fb:
80:95:78:fd:99:54:7b:40:b7:f6:15:26:a8:fd:aa:e5:68:36:
77:95:55:50:9c:13:05:18:da:b1:6e:f0:55:bf:bf:02:c5:a5:
13:26:95:50:70:60:ac:a5:70:4e:3f:df:f0:e0:6e:da:7d:b1:
13:d4:b4:e1:8b:50:8d:cf:54:46:35:0a:8a:7e:4e:e2:2e:86:
fd:d7:a3:71:54:c4:8b:2b:32:eb:46:f6:d7:16:8a:fc:2e:3c:
ea:55:93:73:e0:38:4e:13:0e:42:ab:37:db:4a:01:47:41:36:
bf:e9:c8:b6:50:8c:7b:50:8b:56:79:cb:c2:37:f3:f5:81:d7:
3d:1d:c1:7d:95:a5:34:35:b5:fa:18:f8:5d:31:09:d8:8c:d0:
03:ab:75:8a:e6:86:d1:dd:89:80:84:52:49:0f:2c:96:6c:5d:
e4:87:fc:a8:92:97:ec:3b:89:9a:c5:90:cf:79:26:26:c2:10:
47:8b:a4:5d:a7:21:bd:22:d4:37:63:8a:fc:8c:11:cf:13:66:
96:bc:5f:bd:9a:f8:33:78:7b:77:b5:62:6d:78:94:15:2e:14:
0c:c5:09:51:dd:e2:5d:0e:04:3c:34:74:3c:d5:36:88:cc:f1:
2d:79:c1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:20:18 2025 by rpki-client